diff --git a/src/index.ts b/src/index.ts
index 5ba351a..2df10d8 100644
--- a/src/index.ts
+++ b/src/index.ts
@@ -68,6 +68,7 @@ app.use('/*', cors({
 	allowMethods: ['GET', 'HEAD', 'POST', 'OPTIONS'],
 	maxAge: 86400,
 	credentials: true,
+	exposeHeaders: ['X-Origin']
 }))
 
 app.get('/homepage', async (c) => {
@@ -305,7 +306,7 @@ app.post("/submit", auth0Middleware, async (c) => {
 		if (resp.status == 200) {
 			console.log(`Successfully used secure-submit-endpoint.`);
 			const resp = c.json({ success: "Submitted" });
-			resp.headers.set("x-origin", "true");
+			resp.headers.set("X-Origin", "true");
 			return resp;
 		} else {
 			console.log(`Failed to use secure-submit-endpoint. Response code: '${resp.status}'.`);